Spatial Database Security Access Program

With the development of Information Technology, GIS has penetrated not only into Geography, but also into every field of society and the core of GIS is spatial database. It is obvious that spatial database has a quite important function in GIS, especially in military affairs, disaster defence, public security, electronic government affairs, electric power and digital city and so on, in which we must pay much attention to the security of spatial database.Through research of spatial database access security, this dissertation discusses security problems about spatial database access and transmission, and presents a solution to guarantee spatial data access security and solve some problems, including identity authentication and security transmission of secret data.This dissertation indicates that we should pay attention to spatial database security on data transmission and access, combining the usage of spatial database. To guarantee that identities of clients and servers are right and legal and transmitted data are secret, true and integrated during data transmission and access, this dissertation presents a security access model of spatial database based on PKI framework and SSL protocol.This dissertation introduces digital certificates for communication entities to authenticate, which avoids that passwords are intercepted and captured during transmitted on network. When users register their certificates, registration authority assigns roles to users based on their functions and job properties, which binds up their roles with certificates in order to facilitate authority management. At the same time, a new concept is introduced in this dissertation, which is certificate and private key cruising. It is very convenient for users to use certificates and private keys to access spatial database, which ensures the security of private keys.To guarantee data confidentiality and integrality during transmission, in this dissertation a secure channel is built based on SSL protocol and spatial data are protected with Symmetrical Encryption.Finally, we develop security modules about spatial database with OpenSSL, including identity authentication, authority control and encrypted data transmission, and apply these modules into electric power distribution management information system(DMIS) based on GIS. Through the experiment, the solution scheme can run on the DMIS based on GIS successfully. However, at present, due to the complexity of the whole system, the development is in a primary phase and there are many amendments in future.